login.dealertrack.com

- Cox Automotive Inc. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:c9:4b:0f:b2:73:e9:44:9e:de:35:10:85:ef:c7:45 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cox Automotive Inc.

Organization: Cox Automotive Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:c9:4b:0f:b2:73:e9:44:9e:de:35:10:85:ef:c7:45
Serial Number (int): 10349770063431082847579995006733109061
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: db:f9:14:26:01:2c:99:51:3e:07:77:3a:75:6f:40:aa:25:8a:1c:92
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 32:a8:27:c6:36:69:f3:25:74:86:b4:08:01:a8:8c:42:58:90:81:2f
Fingerprint (sha256): 12:46:8f:dd:38:3b:2d:9b:ce:01:9b:83:d1:20:2a:f1:3e:17:2a:a5:b6:71:8f:8b:21:50:60:b8:c0:c5:85:97

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate login.dealertrack.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.dealertrack.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.dealertrack.com
login-dr.dealertrack.com
sso-dr.dealertrack.com
sso.dealertrack.com

Other certificates including the domain name dealertrack.com

(limited to 100 certificates)
akamai-san38.exacttarget.com
qa.digitalservices.dealertrack.com
appsvc.qa.dealertrack.com
dmshealth.dealertrack.com
dms03a.dms.dealertrack.com
*.uat1.dealertrack.com
clr-bridge.dealertrack.com
dmshealth.dealertrack.com
encrypt.dealertrack.com
*.dtdrs.dealertrack.com
dealertrack.com
*.pa1.dealertrack.com
ibmwebspheremqgctwndc5.dds.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
*.dealertrack.com
integration.dealertrack.com
complianceguide.dealertrack.com
www.dealertrack.com
dt-client-auth.dealertrack.com
partners.qa.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
inventoryplus.dealertrack.com
services.qa.dealertrack.com
sso-saml-np.dealertrack.com
amr.dealertrack.com
cwpstorage.status.symantec.com
*.qat1.dealertrack.com
sign.uat1.dealertrack.com
beta.qa.dealertrack.com
nyvpn.dealertrack.com
*.dtdrs.dealertrack.com
dds.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
encrypt.uat1.dealertrack.com
dds.dealertrack.com
us-dr.dealertrack.com
*.dtdrs.dealertrack.com
appsvc.dealertrack.com
ibmwebspheremqgcpwndc4.dds.dealertrack.com
sign.dealertrack.com
ddstsg.dealertrack.com
dmshealth.dealertrack.com
cwpstorage.status.symantec.com
www.dealertrack.com
*.dvt1.aws.dealertrack.com
amosstatus.ifsleasing.com
*.uat.unifipp.dealertrack.com
blog.dealertrack.com
complianceguide.dealertrack.com
mobile.dealertrack.com
my.qa.dealertrack.com
dmshealth.dealertrack.com
customervoice.acumatica.com
clr-bridge.dealertrack.com
fni-static-np.dealertrack.com
*.dr.dealertrack.com
cwpstorage.status.symantec.com
amosstatus.ifsleasing.com
dms06.dms.dealertrack.com
ebusiness.cdn1.dealertrack.com
dealertrack.com
*.qa1.dealertrack.com
*.api.dealertrack.com
piforceqa.dealertrack.com
*.ua2.dealertrack.com
*.uat2.dealertrack.com
amosstatus.ifsleasing.com
*.uat1.dealertrack.com
amosstatus.ifsleasing.com
dmshealth.dealertrack.com
*.dtdrs.dealertrack.com
complianceguide.dealertrack.com
dtlpi.uat1.dealertrack.com
mobile.dealertrack.com
*.uat1.dealertrack.com
gmaccessories.dealertrack.com
*.dtdrs.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
login.dealertrack.com
dms360.dealertrack.com
*.dms.dealertrack.com
amosstatus.ifsleasing.com
www.uat1.dealertrack.com
ww2.qa1.dealertrack.com
san3166.cdntwrk.com
webservices.qa.dealertrack.com
*.my.dealertrack.com
drs.dealertrack.com
customervoice.acumatica.com
dmshealth.dealertrack.com
encrypt-np.dealertrack.com
2016complianceguide.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
dmshealth.dealertrack.com

Certificate

The complete raw certificate details for login.dealertrack.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6ler5jex8gGFiDH33N
dgSH0PHjlsrgKVEHdtCF71WKvGGFnNxBk2y+0HXEcgbldB1GnsT0KZiScdBg8zTB
YeBDMDegZrvtDTJ5UHHIf/rv4r+ou/DUQWHB9JYRkgF8t3ZoD9KakimSZRCrnrOH
xccxUTbQ9IPrQr0uaBeQWXf4sWn/A75oX0VKhn3v4qWaa6HubhT8ymQrB1cwfDTz
ajuYz+GfdLeEz1DnRGGFH/5V3QdjVW9iv9ARuAgf1lPyfzWsmtlTJjnxgdtOPka8
RD8M2wHIAF3Fc7ygk8czVOmHD744Zku6UY+d/ErzBLQ6tkuZCnHW+Ga2pJhR5C2v
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10349770063431082847579995006733109061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Automotive Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.dealertrack.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20584066120546882734728554582137651450472750239327642721775200697700801560461476512445298527543195749107683879001151885860256531200194782801257869651615916222289368904837870848095648670134453701994578970473265667226357801654021503761479368796123976030999058011570219770201121077988107924090055253328141203704460411198714048252726602607657556901913167996836298183497114764740873997275007716061510432115592533782773958370483831560816948043699361533235688764889795206707113605818993344185281213843430068733195074362512518202701521162372715443591421854832079241071054273228197426424225477611721248542875096674359260852061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbf91426012c99513e07773a756f40aa258a1c92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dr.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-dr.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.dealertrack.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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